{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T16:10:36Z","timestamp":1778947836039,"version":"3.51.4"},"reference-count":12,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T00:00:00Z","timestamp":1654041600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T00:00:00Z","timestamp":1654041600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T00:00:00Z","timestamp":1654041600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Des. Test"],"published-print":{"date-parts":[[2022,6]]},"DOI":"10.1109\/mdat.2021.3077542","type":"journal-article","created":{"date-parts":[[2021,5,4]],"date-time":"2021-05-04T20:33:14Z","timestamp":1620160394000},"page":"63-72","source":"Crossref","is-referenced-by-count":20,"title":["SIT: Stochastic Input Transformation to Defend Against Adversarial Attacks on Deep Neural Networks"],"prefix":"10.1109","volume":"39","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8992-7958","authenticated-orcid":false,"given":"Amira","family":"Guesmi","sequence":"first","affiliation":[{"name":"ENIS, Universit&#x00E9; de Sfax, Sfax, Tunisia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5102-8087","authenticated-orcid":false,"given":"Ihsen","family":"Alouani","sequence":"additional","affiliation":[{"name":"IEMN-DOAE, INSA Hauts-De-France, Universit&#x00E9; Polytechnique Hauts-De-France, Valenciennes, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9862-8506","authenticated-orcid":false,"given":"Mouna","family":"Baklouti","sequence":"additional","affiliation":[{"name":"ENIS, Universit&#x00E9; de Sfax, Sfax, Tunisia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8402-8059","authenticated-orcid":false,"given":"Tarek","family":"Frikha","sequence":"additional","affiliation":[{"name":"ENIS, Universit&#x00E9; de Sfax, Sfax, Tunisia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohamed","family":"Abid","sequence":"additional","affiliation":[{"name":"ENIS, Universit&#x00E9; de Sfax, Sfax, Tunisia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref4","article-title":"Mitigating adversarial effects through randomization","volume":"abs 1711 1991","author":"xie","year":"2017","journal-title":"CoRR"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2951526"},{"key":"ref10","article-title":"On the intriguing connections of regularization, input gradients and transferability of evasion and poisoning attacks","volume":"abs 1809 2861","author":"demontis","year":"2018","journal-title":"CoRR"},{"key":"ref6","author":"lecun","year":"2010","journal-title":"MNIST Handwritten Digit Database"},{"key":"ref11","article-title":"Foolbox v0.8.0: A Python toolbox to benchmark the robustness of machine learning models","volume":"abs 1707 4131","author":"rauber","year":"2017","journal-title":"CoRR"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"},{"key":"ref12","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","author":"athalye","year":"2018","journal-title":"Proc 35th Int Conf Mach Learn (ICML)"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref7","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009"},{"key":"ref2","article-title":"Countering adversarial images using input transformations","volume":"abs 1711 117","author":"guo","year":"2017","journal-title":"CoRR"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00669"}],"container-title":["IEEE Design &amp; Test"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6221038\/9761171\/09422778.pdf?arnumber=9422778","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,30]],"date-time":"2022-05-30T21:37:35Z","timestamp":1653946655000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9422778\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6]]},"references-count":12,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/mdat.2021.3077542","relation":{},"ISSN":["2168-2356","2168-2364"],"issn-type":[{"value":"2168-2356","type":"print"},{"value":"2168-2364","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,6]]}}}